IBMEndpointManagerforRemoteControl Release Notes. Version 9.0.1

IBMEndpointManagerforRemoteControl Release Notes Version 9.0.1

IBMEndpointManagerforRemoteControl Release Notes Version 9.0.1

Note Before using this information and the product it supports, read the information in Notices on page 9. This edition applies to version 9, release 0, modification level 0 of IBM Endpoint Manager and to all subsequent releases and modifications until otherwise indicated in new editions.

Contents Release Notes............ 1 Notices............... 9 Appendix. Support.......... 7 iii

iv IBM Endpoint Manager for Remote Control Release Notes

Release Notes Important: Upgrading to version 9.0.1 Note: The following limitation is not an issue when you upgrade from version 9.0.0 to version 9.0.1. In IBM Endpoint Manager for Remote Control version 9.0.0 new capabilities were introduced that can cause compatibility issues with earlier versions. The issues occur if the different components are not upgraded in the correct order. This limitation applies only to environments where the gateway and broker components are deployed. In these environments, the broker and gateway must be updated before the server or the target components. After they are upgraded, the targets and server can be upgraded in the order that best suits your environment, because there are no dependencies between them. It is recommended that you always back up any properties files. You must back up your properties files for a controller upgrade in this release because any existing properties are lost. For more information, see the IBM Endpoint Manager for Remote Control Installation Guide. What s new A summary of new features and enhancements included in version 9.0.1 of IBM Endpoint Manager for Remote Control. It also contains a summary of the new features and enhancements included in version 9.0.0. Features introduced in version 9.0.1 v On-demand target You can now start remote control sessions over the internet with targets that do not have the target software installed. The sessions are started by using the broker component to make the connection. The target user accesses a web page to enter connection details and the target software is downloaded and temporarily installed on the target. If the session is authenticated by the server and the target user accepts the session request, the session starts. At the end of the session, the target software is deleted. The default web page that is provided by IBM Endpoint Manager for Remote Control can be customized to collect extra information from the target user. You can configure the broker component as a reverse proxy to allow the target user to access only the on-demand web page. No other areas of the IBM Endpoint Manager for Remote Control server GUI are accessible. The reverse proxy can be configured to accept HTTP and HTTPS connections. You can also create a customized web page and integrate the page into your own website. For more details about the on-demand target features, see the IBM Endpoint Manager for Remote Control On-demand Target Guide. v Session policies for unregistered targets You can configure remote control session policies on the server to allow a controller user to start remote control sessions with unregistered targets. Unregistered targets do not send their details to the server. There are two ways to configure unregistered targets. You can install the target software and set the 1

v v v v Managed property to No; the BrokerList property must also be set. You can also use the on-demand target features to start a remote control session with a computer that does not have the target software preinstalled. Recording on the broker It is now possible to record a remote control session on the broker. When the Force Session Recording property is enabled and a broker is involved in the session, the recording is carried out by the broker. The recording is temporarily stored on the broker and is sent to the server at the end of the session. For more details about defining the temporary recording directory, see the IBM Endpoint Manager for Remote Control On-demand Target Guide. Saving a recording on the target The user on an on-demand target can save a recording of the session on their computer. The recording can begin at the start of the session or the target user can start to record during the session. Playing back an on-demand session recording on the target The user on an on-demand target can access a web page where they can download the IBM Endpoint Manager for Remote Control player. They can use the player to play back the on-demand session recording. Handing over session control in a broker session The previous limitation of handover not being available in a broker collaboration session is removed. During a collaboration session that involves a broker, you can now hand over session control if the Allow Handover property is enabled. For more details about handing over a broker collaboration session, see the IBM Endpoint Manager for Remote Control On-demand Target Guide. Features introduced in version 9.0.0 v Collaboration in a session that involves a broker It is possible to share a broker session with other collaborators. For more details about collaboration in a broker session, see the IBM Endpoint Manager for Remote Control Controller User's Guide. v Suppress the master controller acceptance prompt You can configure controller properties to stop the user acceptance prompt from being displayed on the master controller. When a user requests to join a collaboration session, the user acceptance prompt is not displayed. For more information about suppressing the acceptance prompt, see the IBM Endpoint Manager for Remote Control Controller User's Guide. v Broker session support for targets that are not registered with the server The previous version of IBM Endpoint Manager for Remote Control required a target to be registered in the server before a broker session, over the internet, was possible. The prerequisite is removed in this version, however the target software must be installed on the remote target. For more details about connecting to targets that are not registered, see the IBM Endpoint Manager for Remote Control Administrator's Guide. v Perform action in target enhancements You can customize shortcuts to system tools, custom scripts, and keystrokes. The shortcuts are displayed in the Perform Action in Target menu in the controller window. For more information about creating shortcuts, see the IBM Endpoint Manager for Remote Control Administrator's Guide and the IBM Endpoint Manager for Remote Control Controller User's Guide. v Force session termination 2 IBM Endpoint Manager for Remote Control Release Notes

v v v A new function, which is configured by using policies to allow controller users to force the running session to end. This feature is available in peer-to-peer sessions only. For more details, see the IBM Endpoint Manager for Remote Control Administrator's Guide. IP address and Domain history kept in controller You can keep a history of IP addresses and domain information in the peer-to-peer controller to facilitate access to most frequently used targets. For more details about retaining previously-used logon credentials, see the IBM Endpoint Manager for Remote Control Controller User's Guide. Improve session recording playback navigation An enhanced IBM Endpoint Manager for Remote Control with faster and improved navigation. Note: Some of the new capabilities are not applicable to recordings captured with previous versions of IBM Endpoint Manager for Remote Control. Broker installation parameters added to the Target Installation wizard When you create a target installation task by using the IBM Endpoint Manager console, you can enter a list of brokers that the target can connect to. You can also enter a certificate for the broker. For more information, see the IBM Endpoint Manager for Remote Control Console User's Guide Known issues in version 9.0.1 At time of publication, the following issues were known. Defect 708 - Spaces in server installation path. When you install the IBM Endpoint Manager for Remote Control server by using the installer, you must make sure that you do not enter double spaces in the installation path. For example, C:\Program Files (x86)\ IBM\Tivoli\TRC\server. The installation is successful, but when you use Add Remove programs to uninstall the server, an error is reported. Defect 1641 - Proxy credentials window is out of focus when it is displayed on the target. When you start an on-demand session that uses a proxy, the proxy credentials window is out of focus when it is displayed on the target. The target user must click the window to enter the proxy credentials. Defect 16178 TRC_additional_setup truncates strings in the left side bar. The trc_additional_setup installer truncates strings in the left side bar for some languages other than English. Defect rtc1487 - Export Recording ODT Session file name has null instead of the target name. The file name for an exported recording of an on-demand session contains null instead of the target name. The file name contains the session number and null for the target name. For example, 111-null.mov. Defect rtc1852 - UAC prompts not showing on exported session recording. When you export the recording of a session that involved UAC prompts, the resulting video pauses while the UAC prompts are dealt with. The recording continues as normal after the target user deals with the prompt. Defect rtc1884 - LDAP Configuration question marks not showing information. The information question marks on the LDAP Configuration Utility page do not work. Hovering the mouse over the question marks or clicking the question marks has no effect. This issue occurs on Firefox and IE browsers. Release Notes 3

Known limitations in version 9.0.1 At time of publication, the following issues were known. v The current version of the IBM Endpoint Manager for Remote Control server is deployed with the latest IBM Java Runtime Environment 1.7. There is a known limitation in this version of the Java Runtime regarding the IPv6 capabilities in Windows 2003 and Windows XP being deprecated. For more information about this limitation, see http://publib.boulder.ibm.com/infocenter/java7sdk/v7r0/ index.jsp?topic=%2fcom.ibm.java.win.70.doc%2fuser%2flimitations_7.html. This limitation causes the remote control server that is deployed in Windows 2003 and Windows XP to be unable to handle any incoming IPv6 connections. It occurs when the URL, used to access the server, specifies the actual IPv6 address or a host name that resolves to an IPv6 connection. If you must deploy the IBM Endpoint Manager for Remote Control server on Windows 2003 and use IPv6 connections, contact support for instructions on how to deploy and configure an alternative version of the IBM Java Runtime, that supports that environment. v The IBM Endpoint Manager for Remote Control target hangs waiting for the capture thread to end on SuSE SLED 10 SP2, and SuSE SLED 11 GA. Upgrade SuSE SLED 11 to SP1 and SuSE SLED 10 to SP4 to fix this issue. v For the on-demand target on Linux systems, the target is unable to detect when the system switches to a different user. The remote screen on the controller stops responding and there is no warning message to indicate that the screen capture is interrupted. v It is not possible to export session recordings to compressed video files by using the.avi file format. The limitation occurs in 64-bit server environments that use a stand-alone WebSphere Application Server that is set up to use a 64-bit JVM. The export function requires the application server to be running a 32-bit JVM. v Recording files are currently limited to 2 GB in size. The duration of recording required to generate a file of 2 GB varies depending on the activity during the session and resolution settings. A normal session of 5 minutes, 8-bit color mode uses 2 MB of space. v When you are installing the packages for IBM Endpoint Manager for Remote Control on SuSe SLES 11, jexec errors are reported. The following messages might be displayed on the screen. insserv: Script jexec is broken: incomplete LSB comment. insserv: missing `Required-Stop:' entry: please add even if empty. insserv: warning: script 'myserv' missing LSB tags and overrides insserv: Default-Start undefined, assuming default start runlevel(s) for script `myserv' The error is in the Sun Java jexec file. As a workaround you can complete the following steps. Back up the /etc/init.d/jexec file. Edit the jexec file. Add the following line, # Required-Stop: after the line # Required-Start: $local_fs. Save the jexec file. For more information about this limitation, see https://bugzilla.novell.com/ show_bug.cgi?id=787665. v The on-demand target on a Linux computer is unable to detect system proxy settings. If Use system proxy settings is selected in the Firefox browser proxy 4 IBM Endpoint Manager for Remote Control Release Notes

settings, the on-demand target cannot connect by using the proxy. To use the proxy, select Manual proxy configuration in the Firefox proxy settings and set it to the system proxy settings. Known limitations in version 9.0.0 At time of publication, the following issues were known. v When you are using IPv4 and IPv6 networks, if a target is configured with more than one IP address in the same subnet and there is a gateway with an endpoint connection configured to this subnet, the gateway tries to make two connections to the target. If they both succeed, the connection fails. Having multiple IP addresses is common in IPv4 environments but it is not common to have 2 IP addresses from the same subnet. In IPv6 environments, however, computers can be assigned multiple IPv6 addresses automatically through stateless address autoconfiguration in the following cases Windows 7, Windows Vista, Windows 2008, and Windows 2008 R2 automatically create multiple IP addresses. When you configure a static IPv6 address on a computer that is connected to a subnet that has a router, if the router is sending Router Advertisements, the computer might also assign an automatic IPv6 address to itself. Possible workarounds Do not use IPv6 subnets in endpoint connections. The temporary IPv6 address on Windows 7 can be disabled. The stateless autoconfiguration can also be disabled. Use the LocalIPInterface setting on the target to force it to use only a single IP address. Using this setting is only recommended for targets with static IP addresses. Instead of using an Endpoint connection with a subnet, use an Endpoint connection for each separate target. This option is only possible for targets with static IP addresses. Use DHCPv6 instead of stateless autoconfiguration. v When you are using the IBM Endpoint Manager console to upgrade the server component to version 9.0.0, by creating a server installation task, you must back up your property files before the upgrade. The installation task creates a new set of default property files. After the installation you must edit the new property files and update them with your saved values. v It is possible to drag the dialog box that is used when you configure the acceptance window, off screen and therefore you cannot access the dialog box fields. The easiest solution is to use the escape key to exit the dialog box. Next, time the dialog box opens, it is displayed on screen again. v When user acceptance is enabled for a session and the accessible GUI is enabled, the session is rejected by the target even if the target user accepts the session. The accessible GUI does not send the correct codes to the target service to indicate the result of the user acceptance. The target service treats the codes as an acceptance timeout and therefore rejects the session. Set the accessibility property in the target to No as a workaround for this issue. v When you are using the new feature to record the session on the target, if the target cannot contact the server to upload the recording, it keeps it in a queue. When the target successfully contacts the server, it sends a list of the session IDs corresponding to the recordings. The server checks each ID against the session history and if it does not find a session history for a particular ID it tells the target to delete the recording. If Keep recording in target is set to NO, the target Release Notes 5

v v v v v deletes the recording. Otherwise, the target removes the recording from the queue but still keeps the recording on its own disk. For more details about recording the session on the target, see IBM Endpoint Manager for Remote Control Administrator's Guide. On Windows 8 and Windows Server 2012, if the policy Allow input lock is set to yes, the target disables it and enables Allow input lock with visible screen instead. On the controller, this issue causes the Enable privacy menu to be disabled and the Enable input lock menu to be enabled. If this policy is enabled, the controller user can block and unblock input on the target but they cannot enable privacy mode. Additionally, if the Set target locked policy is yes, the target enables the Display screen on locked target policy. The target starts blocking input at the start of the session but does not enable the privacy bitmap. On Windows 8 and Windows Server 2012, drawing and guidance does not work in Modern UI mode. Drawing and Guidance actions do not work during a remote control session if the user is in the Modern UI. On Windows 8 and Windows Server 2012, no notification is displayed in Modern UI when user acceptance options are set to yes. If Enable user acceptance for incoming connections is enabled for the session and the user is in Modern UI when the session starts, the target user does not get any notification that the user acceptance window is showing on the desktop. Note: The same applies for all user acceptance policies when they are enabled. The target user does not get any notification that the user acceptance window is showing on the desktop. On Windows 8 and Windows Server 2012, OSSN banner is not displayed in Modern UI Mode. If the On Screen Session Notification policy is enabled, the overlay, indicating that a session is active, is not shown if the user is in Modern UI mode. No visible indication is given to show that the remote control session is active. Denied Program Execution List policy is not supported on 64-bit Windows. Results in the following error message: Session rejected because target cannot enforce restricted mode. 6 IBM Endpoint Manager for Remote Control Release Notes

Appendix. Support For more information about this product, see the following resources: v IBM Endpoint Manager Support site v IBM Endpoint Manager wiki v Knowledge Base v Forums and Communities 7

8 IBM Endpoint Manager for Remote Control Release Notes

Notices This information was developed for products and services offered in the U.S.A. IBM may not offer the products, services, or features discussed in this document in other countries. Consult your local IBM representative for information on the products and services currently available in your area. Any reference to an IBM product, program, or service is not intended to state or imply that only that IBM product, program, or service may be used. Any functionally equivalent product, program, or service that does not infringe any IBM intellectual property right may be used instead. However, it is the user's responsibility to evaluate and verify the operation of any non-ibm product, program, or service. IBM may have patents or pending patent applications covering subject matter described in this document. The furnishing of this document does not grant you any license to these patents. You can send license inquiries, in writing, to: IBM Director of Licensing IBM Corporation North Castle Drive Armonk, NY 10504-1785 U.S.A. For license inquiries regarding double-byte character set (DBCS) information, contact the IBM Intellectual Property Department in your country or send inquiries, in writing, to: Intellectual Property Licensing Legal and Intellectual Property Law IBM Japan Ltd. 19-21, Nihonbashi-Hakozakicho, Chuo-ku Tokyo 103-8510, Japan The following paragraph does not apply to the United Kingdom or any other country where such provisions are inconsistent with local law: INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some states do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement may not apply to you. This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the publication. IBM may make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time without notice. Any references in this information to non-ibm Web sites are provided for convenience only and do not in any manner serve as an endorsement of those Web 9

sites. The materials at those Web sites are not part of the materials for this IBM product and use of those Web sites is at your own risk. IBM may use or distribute any of the information you supply in any way it believes appropriate without incurring any obligation to you. Licensees of this program who wish to have information about it for the purpose of enabling: (i) the exchange of information between independently created programs and other programs (including this one) and (ii) the mutual use of the information which has been exchanged, should contact: IBM Corporation 2Z4A/101 11400 Burnet Road Austin, TX 78758 U.S.A. Such information may be available, subject to appropriate terms and conditions, including in some cases, payment of a fee. The licensed program described in this document and all licensed material available for it are provided by IBM under terms of the IBM Customer Agreement, IBM International Program License Agreement or any equivalent agreement between us. Any performance data contained herein was determined in a controlled environment. Therefore, the results obtained in other operating environments may vary significantly. Some measurements may have been made on development-level systems and there is no guarantee that these measurements will be the same on generally available systems. Furthermore, some measurements may have been estimated through extrapolation. Actual results may vary. Users of this document should verify the applicable data for their specific environment. Information concerning non-ibm products was obtained from the suppliers of those products, their published announcements or other publicly available sources. IBM has not tested those products and cannot confirm the accuracy of performance, compatibility or any other claims related to non-ibm products. Questions on the capabilities of non-ibm products should be addressed to the suppliers of those products. All statements regarding IBM's future direction or intent are subject to change or withdrawal without notice, and represent goals and objectives only. All IBM prices shown are IBM's suggested retail prices, are current and are subject to change without notice. Dealer prices may vary. This information is for planning purposes only. The information herein is subject to change before the products described become available. This information contains examples of data and reports used in daily business operations. To illustrate them as completely as possible, the examples include the names of individuals, companies, brands, and products. All of these names are fictitious and any similarity to the names and addresses used by an actual business enterprise is entirely coincidental. COPYRIGHT LICENSE: 10 IBM Endpoint Manager for Remote Control Release Notes

This information contains sample application programs in source language, which illustrate programming techniques on various operating platforms. You may copy, modify, and distribute these sample programs in any form without payment to IBM, for the purposes of developing, using, marketing or distributing application programs conforming to the application programming interface for the operating platform for which the sample programs are written. These examples have not been thoroughly tested under all conditions. IBM, therefore, cannot guarantee or imply reliability, serviceability, or function of these programs. The sample programs are provided "AS IS", without warranty of any kind. IBM shall not be liable for any damages arising out of your use of the sample programs. If you are viewing this information softcopy, the photographs and color illustrations may not appear. Trademarks IBM, the IBM logo, and ibm.com are trademarks or registered trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at Copyright and trademark information at www.ibm.com/legal/copytrade.shtml. Adobe, Acrobat, PostScript and all Adobe-based trademarks are either registered trademarks or trademarks of Adobe Systems Incorporated in the United States, other countries, or both. IT Infrastructure Library is a registered trademark of the Central Computer and Telecommunications Agency which is now part of the Office of Government Commerce. Intel, Intel logo, Intel Inside, Intel Inside logo, Intel Centrino, Intel Centrino logo, Celeron, Intel Xeon, Intel SpeedStep, Itanium, and Pentium are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries. Linux is a trademark of Linus Torvalds in the United States, other countries, or both. Microsoft, Windows, Windows NT, and the Windows logo are trademarks of Microsoft Corporation in the United States, other countries, or both. ITIL is a registered trademark, and a registered community trademark of the Office of Government Commerce, and is registered in the U.S. Patent and Trademark Office. UNIX is a registered trademark of The Open Group in the United States and other countries. Java and all Java-based trademarks and logos are trademarks or registered trademarks of Oracle and/or its affiliates. Cell Broadband Engine is a trademark of Sony Computer Entertainment, Inc. in the United States, other countries, or both and is used under license therefrom. Linear Tape-Open, LTO, the LTO Logo, Ultrium, and the Ultrium logo are trademarks of HP, IBM Corp. and Quantum in the U.S. and other countries. Notices 11

12 IBM Endpoint Manager for Remote Control Release Notes

Printed in USA